Defencecore
Show HN: A prompt to check Supabase DB security
Last checked:
What is Defencecore?
Defencecore is a free Supabase security audit tool that checks Row Level Security configuration by running read-only queries against your database. Paste the provided prompt into Claude Code, Cursor, or any AI agent to identify exposed tables, overpermissive policies, and public storage buckets with explanations of actual security impact and manual fix guidance.
Defencecore pricing
Pricing model: Freemium
Defencecore pros
- No signup or authentication required - runs immediately
- Read-only auditing - cannot access application data or modify database
- Works with any AI agent tool (Claude Code, Cursor, etc.) or standalone in Supabase SQL editor
- Provides severity levels and explains real-world security implications of each finding
Defencecore cons
- Limited to Supabase Row Level Security auditing - doesn't cover other security aspects
- Requires manual implementation of fixes - no auto-remediation
- One-time snapshot audit - cannot catch issues introduced after the audit runs
Frequently asked questions about Defencecore
Do I need to sign up or provide an email?
No. The tool requires no signup or email. You can run it immediately in Claude Code, Cursor, your AI agent, or directly in Supabase SQL editor.
What data can the tool access?
The tool only reads Postgres catalogue views (pg_tables, pg_policies, storage.buckets). It cannot read any rows of application data and makes no changes to your database.
Can the tool fix the security issues it finds?
No. The tool identifies issues and explains fixes in words, but you must implement them manually. It will not run, apply, or offer to run any database-modifying statements.
What if I don't have an AI agent connected?
You can copy the SQL query directly into the Supabase SQL editor and run it there to get the same audit results without AI explanations.